corpus.blog
41,554 blogs · 5,217,468 posts Claim your blog
Record · corpus.blog/posts/01a0875e-fa8c-70b6-a841-5b55222d0eae

Put an io_uring on it - Exploiting the Linux Kernel

chomp.ie · published undated

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chomp.ie Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
87
Words captured
8,616

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41073
cve.mitre.org
https://chompie.rip/Blog+Posts/Kernel+Pwning+with+eBPF+-+a+Love+Story
chompie.rip
https://blogs.oracle.com/linux/post/an-introduction-to-the-io-uring-asynchronous-io-framework
blogs.oracle.com
https://lwn.net/Articles/810414/
lwn.net
https://twitter.com/axboe
twitter.com
https://web.archive.org/web/20221130215710/https://twitter.com/axboe/status/1483790445532512260
web.archive.org
https://unixism.net/loti/tutorial/sq_poll.html
unixism.net
https://en.wikipedia.org/wiki/Context_switch
en.wikipedia.org
https://unixism.net/loti/what_is_io_uring.html
unixism.net
https://stackoverflow.com/questions/15054086/what-does-atomic-mean-in-programming/15054186
stackoverflow.com
https://kernel.dk/io_uring.pdf
kernel.dk
https://unixism.net/loti/async_intro.html
unixism.net
https://meltdownattack.com/
meltdownattack.com
https://www.theregister.com/2021/06/22/spectre_linux_performance_test_analysis/
theregister.com
https://github.com/axboe/liburing
github.com
https://windows-internals.com/ioring-vs-io_uring-a-comparison-of-windows-and-linux-implementations/
windows-internals.com
https://web.archive.org/web/20221130215710/https://manpages.debian.org/unstable/liburing-dev/io_uring_setup.2.en.html
web.archive.org
https://unixism.net/loti/ref-liburing/
unixism.net
https://en.wikipedia.org/wiki/Open-source_software
en.wikipedia.org
https://web.archive.org/web/20221130215710/https://wjwh.eu/posts/2021-10-01-no-syscall-server-iouring.html
web.archive.org
https://wjwh.eu/posts/2021-10-01-no-syscall-server-iouring.html
wjwh.eu
https://en.wikipedia.org/wiki/Circular_buffer
en.wikipedia.org
https://manpages.debian.org/unstable/liburing-dev/io_uring_setup.2.en.html
manpages.debian.org
https://manpages.debian.org/unstable/liburing-dev/io_uring_enter.2.en.html
manpages.debian.org
https://www.zdnet.com/article/which-are-the-most-insecure-programming-languages/
zdnet.com
https://en.wikipedia.org/wiki/Security-Enhanced_Linux
en.wikipedia.org
https://stackoverflow.com/questions/48524418/what-does-in-flight-request-mean-for-a-web-browser
stackoverflow.com
https://lwn.net/Articles/813311/
lwn.net
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3491
cve.mitre.org
https://twitter.com/st424204
twitter.com
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/fs/io_uring.c
github.com
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/include/linux/fs.h
github.com
https://en.wikipedia.org/wiki/Processor_affinity
en.wikipedia.org
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/include/linux/sched.h
github.com
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/include/linux/seq_file.h
github.com
https://web.archive.org/web/20221130215710/https://dev.to/satorutakeuchi/a-brief-description-of-aslr-and-kaslr-2bbp
web.archive.org
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/include/linux/filter.h
github.com
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/include/linux/cred.h
github.com
https://cwe.mitre.org/data/definitions/416.html
cwe.mitre.org
https://argp.github.io/2012/01/03/linux-kernel-heap-exploitation/
argp.github.io
https://ruffell.nz/programming/writeups/2019/02/15/looking-at-kmalloc-and-the-slub-memory-allocator.html
ruffell.nz
The Slab Allocator in the Linux kernel Read at the source ↗
hammertux.github.io
https://events.static.linuxfound.org/images/stories/pdf/klf2012_kim.pdf
events.static.linuxfound.org
https://github.com/axboe/liburing/blob/37856ad78b605a388b7ae598a55544c7c6d3abe5/src/include/liburing.h
github.com
https://cateee.net/lkddb/web-lkddb/SLAB_FREELIST_RANDOM.html
cateee.net
https://www.kernel.org/doc/html/latest/trace/events-kmem.html
kernel.org
https://www.kernel.org/doc/Documentation/trace/ftrace.txt
kernel.org
https://twitter.com/tehjh
twitter.com
https://googleprojectzero.blogspot.com/2019/01/taking-page-from-kernels-book-tlb-issue.html
googleprojectzero.blogspot.com
https://man7.org/linux/man-pages/man2/sched_setaffinity.2.html
man7.org
https://www.spinics.net/lists/io-uring/msg09009.html
spinics.net
https://twitter.com/vnik5287
twitter.com
https://duasynt.com/blog/linux-kernel-heap-spray
duasynt.com
https://man7.org/linux/man-pages/man2/setxattr.2.html
man7.org
https://man7.org/linux/man-pages/man2/userfaultfd.2.html
man7.org
https://twitter.com/tehjh/status/1438330352075001856
twitter.com
https://www.kernel.org/doc/html/latest/filesystems/fuse.html
kernel.org
https://man7.org/linux/man-pages/man2/mmap.2.html
man7.org
https://ruia-ruia.github.io/NFC-UAF/
ruia-ruia.github.io
https://twitter.com/Awarau1
twitter.com
https://github.com/chompie1337/kernel_obj_finder
github.com
https://linux.die.net/man/1/pahole
linux.die.net
https://twitter.com/a13xp0p0v
twitter.com
https://a13xp0p0v.github.io/2021/02/09/CVE-2021-26708.html
a13xp0p0v.github.io
https://www.kernel.org/doc/html/latest/filesystems/seq_file.html
kernel.org
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/fs/seq_file.c
github.com
https://dev.to/satorutakeuchi/a-brief-description-of-aslr-and-kaslr-2bbp
dev.to
https://github.com/torvalds/linux/blob/6880fa6c56601bb8ed59df6c30fd390cc5f6dd8f/kernel/bpf/core.c
github.com
https://cateee.net/lkddb/web-lkddb/BPF_JIT_ALWAYS_ON.html
cateee.net
https://en.wikipedia.org/wiki/Return-oriented_programming
en.wikipedia.org
https://github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073
github.com
https://en.wikipedia.org/wiki/Seccomp
en.wikipedia.org
https://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html
googleprojectzero.blogspot.com
https://cateee.net/lkddb/web-lkddb/BPF_UNPRIV_DEFAULT_OFF.html
cateee.net
https://cateee.net/lkddb/web-lkddb/SLAB_FREELIST_HARDENED.html
cateee.net
https://en.wikipedia.org/wiki/Control-flow_integrity
en.wikipedia.org
https://github.com/axboe/liburing/commit/d06c81aa3c170b586b09a88ebcd2c04f3106bd44
github.com
https://twitter.com/gregkh
twitter.com
https://cve.mitre.org/
cve.mitre.org
https://www.openwall.com/lists/oss-security/2021/09/18/2
openwall.com
A Dummy's Guide to Disclosing Linux Kernel Vulnerabilities Read at the source ↗
sam4k.com
https://www.cnet.com/tech/tech-industry/torvalds-attacks-it-industry-security-circus-1/
cnet.com
https://twitter.com/grsecurity/status/1486795432202276864
twitter.com
https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html
googleprojectzero.github.io
https://twitter.com/Ga_ryo_
twitter.com
https://flattsecurity.medium.com/cve-2021-20226-a-reference-counting-bug-which-leads-to-local-privilege-escalation-in-io-uring-e946bd69177a
flattsecurity.medium.com
https://twitter.com/netspooky
twitter.com
Elsewhere on chomp.ie (1)